$ rpki-client -vvf rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft File: QJOHCXJ0OMjB3r_9BBWQWEggxug.mft (raw, json) Hash identifier: 79iaaLC2gy1nN9UF2iDPApI+dZIS14wKHnUasmS8ybE= Subject key identifier: D7:CD:8D:22:0D:18:74:37:F0:F7:54:11:F6:4D:E9:29:CC:FE:B4:33 Authority key identifier: 40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8 Certificate issuer: /CN=A917618F/serialNumber=40938709727438C8C1DEBFFD041590584820C6E8 Certificate serial: 12BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft Manifest number: 12B2 Signing time: Sat 14 Jun 2025 17:01:08 +0000 Manifest this update: Sat 14 Jun 2025 17:01:08 +0000 Manifest next update: Sat 21 Jun 2025 17:01:08 +0000 Files and hashes: 1: QJOHCXJ0OMjB3r_9BBWQWEggxug.crl (hash: wfKnhif7k/fZy5AfoIbckYnybF2O7CYutzEGCDz5pYw=) 2: 2FE4DA1EC2E111E8A19CB72FC4F9AE02.roa (hash: HkQW1ELmD+iLXWXgNsuJGsFujvrmVSrBFXmyCQkIzxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4795 (0x12bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917618F, serialNumber=40938709727438C8C1DEBFFD041590584820C6E8 Validity Not Before: Jun 14 17:01:08 2025 GMT Not After : Jun 21 17:01:08 2025 GMT Subject: CN=684daad4-9a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cb:62:57:5b:d2:f2:f8:0e:96:87:a7:b2:d6: c6:77:7e:98:c9:98:a1:52:28:01:bb:2c:e1:1d:15: 19:3b:04:5c:28:1f:bc:09:af:00:15:8e:b1:3d:7f: 6d:94:c5:70:0f:e7:da:41:68:2f:5b:2a:59:b6:ab: 1c:c7:62:d5:22:1a:e1:58:f7:d0:b6:ef:ac:66:79: 8e:ca:ff:f3:79:f4:4b:2b:ac:0f:eb:32:04:1d:65: 4d:db:97:2a:a9:8c:26:58:d7:f3:7b:e1:d8:2c:7e: 4b:6b:e2:f4:2d:81:61:fd:ea:a2:e1:ec:bc:2d:9d: 7a:53:b8:ca:03:06:d0:0f:c1:68:71:a2:b9:dc:f6: d1:c0:e3:5b:30:30:8f:55:4e:7a:c2:d7:dd:4d:f4: 53:2a:29:c6:eb:8f:6b:5b:7a:2f:56:16:dd:58:92: 59:8d:59:ee:b2:3f:8f:12:9b:45:bd:6e:66:51:4e: 3d:05:83:8b:d6:02:90:42:0d:87:dd:2c:58:cb:40: f3:4e:3a:0b:d9:7b:a7:b8:44:10:6d:d8:3f:16:66: e7:38:40:f2:72:03:b7:78:ec:11:bc:6d:3d:7d:b3: c0:56:c8:3b:9f:d1:1e:a0:9f:c6:06:02:2d:c6:d1: 33:7f:7c:51:b6:c0:b2:fa:b9:fc:26:3a:a2:9a:71: 21:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CD:8D:22:0D:18:74:37:F0:F7:54:11:F6:4D:E9:29:CC:FE:B4:33 X509v3 Authority Key Identifier: keyid:40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:fc:7a:14:37:ac:16:4a:34:01:d7:cb:3d:54:5a:e8:af:ae: 6e:18:0c:a6:8c:28:02:41:de:f5:1f:65:47:41:6e:5e:b8:fe: 26:d0:65:a5:f6:88:26:e9:c9:31:bb:bc:73:16:d1:10:9e:9e: 97:44:5f:81:2e:5c:d8:f4:2e:46:98:56:39:7f:0f:27:e1:76: 5e:a4:71:05:62:04:a7:12:1b:b7:19:39:8f:97:b8:68:60:38: f2:41:2a:95:0a:11:fc:86:a8:59:18:d1:b6:4c:4e:19:64:d0: e8:08:61:a5:21:81:7c:40:da:94:3c:a0:5b:5f:5a:ad:a8:0f: cf:87:64:23:b9:bd:09:31:68:9f:9f:28:b7:a7:43:c4:3d:31: aa:9d:70:f5:1c:e9:ea:4b:d1:3a:28:54:ea:ac:ab:4f:53:a6: 2c:2a:a0:ba:7d:51:5f:5d:58:03:bd:75:f6:3c:68:2b:01:77: 45:59:0c:f5:c3:4c:b3:c2:f4:b6:b2:f6:0c:02:dc:b9:d2:0e: 9e:3f:da:60:78:c1:9a:21:8f:bd:35:d3:fd:2f:dd:32:80:c7: 5f:fb:11:0d:55:8e:f4:2a:55:f6:01:f3:a4:ad:7e:91:a3:93: 07:46:7a:af:d7:dd:9d:e1:52:82:8f:b6:58:06:bd:2d:fa:63: 21:bb:22:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICErswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYxOEYxMTAvBgNVBAUTKDQwOTM4NzA5NzI3NDM4QzhDMURFQkZGRDA0MTU5MDU4 NDgyMEM2RTgwHhcNMjUwNjE0MTcwMTA4WhcNMjUwNjIxMTcwMTA4WjAYMRYwFAYD VQQDEw02ODRkYWFkNC05YTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwstiV1vS8vgOloenstbGd36YyZihUigBuyzhHRUZOwRcKB+8Ca8AFY6xPX9t lMVwD+faQWgvWypZtqscx2LVIhrhWPfQtu+sZnmOyv/zefRLK6wP6zIEHWVN25cq qYwmWNfze+HYLH5La+L0LYFh/eqi4ey8LZ16U7jKAwbQD8FocaK53PbRwONbMDCP VU56wtfdTfRTKinG649rW3ovVhbdWJJZjVnusj+PEptFvW5mUU49BYOL1gKQQg2H 3SxYy0DzTjoL2XunuEQQbdg/FmbnOEDycgO3eOwRvG09fbPAVsg7n9EeoJ/GBgIt xtEzf3xRtsCy+rn8JjqimnEhbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfNjSIN GHQ38PdUEfZN6SnM/rQzMB8GA1UdIwQYMBaAFECThwlydDjIwd6//QQVkFhIIMbo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjE4Ri9EMjhENzVDMEMy REYxMUU4QTY0RUZEMkNDNEY5QUUwMi9RSk9IQ1hKME9NakIzcl85QkJXUVdFZ2d4 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKT0hDWEowT01qQjNyXzlCQldRV0VnZ3h1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjE4Ri9EMjhENzVDMEMyREYxMUU4QTY0RUZEMkNDNEY5QUUwMi9RSk9IQ1hKME9N akIzcl85QkJXUVdFZ2d4dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF/HoUN6wWSjQB18s9VFror65uGAymjCgCQd71H2VHQW5euP4m0GWl 9ogm6ckxu7xzFtEQnp6XRF+BLlzY9C5GmFY5fw8n4XZepHEFYgSnEhu3GTmPl7ho YDjyQSqVChH8hqhZGNG2TE4ZZNDoCGGlIYF8QNqUPKBbX1qtqA/Ph2Qjub0JMWif nyi3p0PEPTGqnXD1HOnqS9E6KFTqrKtPU6YsKqC6fVFfXVgDvXX2PGgrAXdFWQz1 w0yzwvS2svYMAty50g6eP9pgeMGaIY+9NdP9L90ygMdf+xENVY70KlX2AfOkrX6R o5MHRnqv192d4VKCj7ZYBr0t+mMhuyLQ -----END CERTIFICATE-----Generated at Sat Jun 14 19:30:59 2025 by rpki-client